CVE-2026-21090: Libsaviextractor.so vulnerability
Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in SMR Sep-2026 Release 1
Event History
Frequently Asked Questions
Who can exploit this issue?
The issue is described as exploitable by local attackers. The provided information does not indicate that it can be exploited remotely.
What impact does successful exploitation have?
Successful exploitation allows an attacker to write out-of-bounds memory in libsaviextractor.so. The provided information does not specify resulting privileges, code execution, or data exposure.
How can I tell whether a device is affected?
Devices using a version of libsaviextractor.so from before SMR Sep-2026 Release 1 are affected according to the advisory description. The provided information does not include specific device models or version identifiers.